@hiai-gg/docsmint 0.6.7 → 0.7.0

package/dist/backend-account-runtime-cleanup.js

@@ -17,49 +17,53 @@ var __export = (target, all) => {
 // ../db/src/schema.ts
 var exports_schema = {};
 __export(exports_schema, {
-  versions: () => versions,
-  versionRelations: () => versionRelations,
-  verifications: () => verifications,
-  users: () => users,
-  tags: () => tags,
-  tagRelations: () => tagRelations,
-  shareRoleEnum: () => shareRoleEnum,
-  shareLinks: () => shareLinks,
-  shareLinkRelations: () => shareLinkRelations,
-  shareGrantStatusEnum: () => shareGrantStatusEnum,
-  shareAccessModeEnum: () => shareAccessModeEnum,
-  sessions: () => sessions,
-  pipelineStatusEnum: () => pipelineStatusEnum,
-  pipelineStageEnum: () => pipelineStageEnum,
-  lifecycleOperations: () => lifecycleOperations,
-  lifecycleOperationStatusEnum: () => lifecycleOperationStatusEnum,
-  lifecycleOperationKindEnum: () => lifecycleOperationKindEnum,
-  guestAccessRelations: () => guestAccessRelations,
-  guestAccess: () => guestAccess,
-  folders: () => folders,
-  folderRelations: () => folderRelations,
-  embeddingStatusEnum: () => embeddingStatusEnum,
-  documents: () => documents,
-  documentVisibilityEnum: () => documentVisibilityEnum,
-  documentTags: () => documentTags,
-  documentTagRelations: () => documentTagRelations,
-  documentRelations: () => documentRelations,
-  documentPipelineRuns: () => documentPipelineRuns,
-  documentPipelineBatches: () => documentPipelineBatches,
-  documentKnowledgeSummaries: () => documentKnowledgeSummaries,
-  documentEmbeddings: () => documentEmbeddings,
-  documentEmbeddingRelations: () => documentEmbeddingRelations,
-  documentCreateOperations: () => documentCreateOperations,
-  categoryRelations: () => categoryRelations,
-  categories: () => categories,
-  auditLog: () => auditLog,
-  attachments: () => attachments,
-  attachmentRelations: () => attachmentRelations,
-  apiKeys: () => apiKeys,
+  accounts: () => accounts,
   apiKeyRelations: () => apiKeyRelations,
-  accounts: () => accounts
+  apiKeys: () => apiKeys,
+  attachmentRelations: () => attachmentRelations,
+  attachmentStorageCleanupOutbox: () => attachmentStorageCleanupOutbox,
+  attachments: () => attachments,
+  auditLog: () => auditLog,
+  categories: () => categories,
+  categoryRelations: () => categoryRelations,
+  documentCreateOperations: () => documentCreateOperations,
+  documentEmbeddingRelations: () => documentEmbeddingRelations,
+  documentEmbeddings: () => documentEmbeddings,
+  documentKnowledgeSummaries: () => documentKnowledgeSummaries,
+  documentPipelineBatches: () => documentPipelineBatches,
+  documentPipelineRuns: () => documentPipelineRuns,
+  documentRelations: () => documentRelations,
+  documentTagRelations: () => documentTagRelations,
+  documentTags: () => documentTags,
+  documentVisibilityEnum: () => documentVisibilityEnum,
+  documents: () => documents,
+  embeddingStatusEnum: () => embeddingStatusEnum,
+  folderRelations: () => folderRelations,
+  folders: () => folders,
+  guestAccess: () => guestAccess,
+  guestAccessRelations: () => guestAccessRelations,
+  lifecycleOperationKindEnum: () => lifecycleOperationKindEnum,
+  lifecycleOperationStatusEnum: () => lifecycleOperationStatusEnum,
+  lifecycleOperations: () => lifecycleOperations,
+  metadataReembedOutbox: () => metadataReembedOutbox,
+  pendingAttachmentCleanupAuthorizations: () => pendingAttachmentCleanupAuthorizations,
+  pendingAttachmentUploads: () => pendingAttachmentUploads,
+  pipelineStageEnum: () => pipelineStageEnum,
+  pipelineStatusEnum: () => pipelineStatusEnum,
+  sessions: () => sessions,
+  shareAccessModeEnum: () => shareAccessModeEnum,
+  shareGrantStatusEnum: () => shareGrantStatusEnum,
+  shareLinkRelations: () => shareLinkRelations,
+  shareLinks: () => shareLinks,
+  shareRoleEnum: () => shareRoleEnum,
+  tagRelations: () => tagRelations,
+  tags: () => tags,
+  users: () => users,
+  verifications: () => verifications,
+  versionRelations: () => versionRelations,
+  versions: () => versions
 });
-import { pgTable, uuid, text, timestamp, bigint, jsonb, index, uniqueIndex, customType, boolean, check, integer, pgEnum } from "drizzle-orm/pg-core";
+import { pgTable, uuid, text, timestamp, bigint, jsonb, index, uniqueIndex, customType, boolean, check, integer, pgEnum, primaryKey } from "drizzle-orm/pg-core";
 import { relations, sql } from "drizzle-orm";
 var vector = customType({
   dataType(config) {
@@ -227,6 +231,7 @@ var documents = pgTable("documents", {
   activeEmbeddingGeneration: uuid("active_embedding_generation"),
   pendingEmbeddingGeneration: uuid("pending_embedding_generation"),
   embeddingProfile: text("embedding_profile"),
+  embeddingContextHash: text("embedding_context_hash"),
   embeddingErrorCode: text("embedding_error_code"),
   embeddingUpdatedAt: timestamp("embedding_updated_at"),
   deletedAt: timestamp("deleted_at"),
@@ -265,6 +270,8 @@ var documentPipelineRuns = pgTable("document_pipeline_runs", {
   generationId: uuid("generation_id").notNull(),
   revision: text("revision").notNull(),
   source: text("source").notNull(),
+  embeddingContextHash: text("embedding_context_hash"),
+  refreshMode: text("refresh_mode").notNull().default("full"),
   status: pipelineStatusEnum("status").notNull().default("pending"),
   prepareStatus: pipelineStatusEnum("prepare_status").notNull().default("pending"),
   embedStatus: pipelineStatusEnum("embed_status").notNull().default("pending"),
@@ -285,7 +292,8 @@ var documentPipelineRuns = pgTable("document_pipeline_runs", {
   updatedAt: timestamp("updated_at").defaultNow().notNull()
 }, (table) => [
   uniqueIndex("document_pipeline_runs_document_generation_idx").on(table.documentId, table.generationId),
-  index("document_pipeline_runs_owner_status_updated_idx").on(table.ownerId, table.status, table.updatedAt)
+  index("document_pipeline_runs_owner_status_updated_idx").on(table.ownerId, table.status, table.updatedAt),
+  check("document_pipeline_runs_refresh_mode_check", sql`${table.refreshMode} in ('incremental', 'full')`)
 ]);
 var documentPipelineBatches = pgTable("document_pipeline_batches", {
   id: uuid("id").primaryKey().defaultRandom(),
@@ -311,6 +319,19 @@ var documentPipelineBatches = pgTable("document_pipeline_batches", {
   index("document_pipeline_batches_stage_status_available_idx").on(table.stage, table.status, table.availableAt),
   index("document_pipeline_batches_document_id_idx").on(table.documentId)
 ]);
+var metadataReembedOutbox = pgTable("metadata_reembed_outbox", {
+  id: uuid("id").primaryKey(),
+  operationId: uuid("operation_id").notNull(),
+  documentId: uuid("document_id").notNull().references(() => documents.id, { onDelete: "cascade" }),
+  ownerId: uuid("owner_id").notNull().references(() => users.id, { onDelete: "cascade" }),
+  workspaceId: text("workspace_id"),
+  revision: text("revision").notNull(),
+  createdAt: timestamp("created_at").defaultNow().notNull()
+}, (table) => [
+  uniqueIndex("metadata_reembed_outbox_operation_document_idx").on(table.operationId, table.documentId),
+  index("metadata_reembed_outbox_operation_id_idx").on(table.operationId, table.id),
+  index("metadata_reembed_outbox_created_id_idx").on(table.createdAt, table.id)
+]);
 var documentKnowledgeSummaries = pgTable("document_knowledge_summaries", {
   id: uuid().primaryKey().defaultRandom(),
   document_id: uuid().notNull().references(() => documents.id, { onDelete: "cascade" }),
@@ -447,6 +468,7 @@ var attachments = pgTable("attachments", {
   id: uuid("id").primaryKey().defaultRandom(),
   documentId: uuid("document_id").notNull().references(() => documents.id, { onDelete: "cascade" }),
   workspaceId: text("workspace_id"),
+  uploadedBy: uuid("uploaded_by").notNull().references(() => users.id, { onDelete: "restrict" }),
   filename: text("filename").notNull(),
   mimeType: text("mime_type").notNull(),
   size: bigint("size", { mode: "number" }).notNull(),
@@ -454,8 +476,88 @@ var attachments = pgTable("attachments", {
   createdAt: timestamp("created_at").defaultNow().notNull()
 }, (table) => [
   index("attachments_document_id_idx").on(table.documentId),
+  index("attachments_uploaded_by_idx").on(table.uploadedBy),
   uniqueIndex("attachments_storage_key_unique").on(table.storageKey)
 ]);
+var pendingAttachmentUploads = pgTable("pending_attachment_uploads", {
+  id: uuid("id").primaryKey().defaultRandom(),
+  documentId: uuid("document_id").notNull().references(() => documents.id, { onDelete: "restrict" }),
+  actorUserId: uuid("actor_user_id").notNull().references(() => users.id, { onDelete: "restrict" }),
+  workspaceId: text("workspace_id"),
+  storageKey: text("storage_key").notNull(),
+  tokenHash: text("token_hash").notNull(),
+  filename: text("filename").notNull(),
+  mimeType: text("mime_type").notNull(),
+  declaredSize: bigint("declared_size", { mode: "number" }).notNull(),
+  quotaReservationId: text("quota_reservation_id"),
+  quotaOperationKey: text("quota_operation_key").notNull(),
+  quotaState: text("quota_state").notNull(),
+  actualSize: bigint("actual_size", { mode: "number" }),
+  urlIssuedAt: timestamp("url_issued_at"),
+  confirmingAt: timestamp("confirming_at"),
+  leaseOwner: text("lease_owner"),
+  leaseExpiresAt: timestamp("lease_expires_at"),
+  attemptCount: integer("attempt_count").default(0).notNull(),
+  lastError: text("last_error"),
+  expiresAt: timestamp("expires_at").notNull(),
+  createdAt: timestamp("created_at").defaultNow().notNull()
+}, (table) => [
+  uniqueIndex("pending_attachment_uploads_storage_key_unique").on(table.storageKey),
+  uniqueIndex("pending_attachment_uploads_token_hash_unique").on(table.tokenHash),
+  index("pending_attachment_uploads_actor_expiry_idx").on(table.actorUserId, table.expiresAt),
+  index("pending_attachment_uploads_document_idx").on(table.documentId),
+  index("pending_attachment_uploads_cleanup_lease_idx").on(table.expiresAt, table.leaseExpiresAt, table.id),
+  check("pending_attachment_uploads_quota_state_check", sql`${table.quotaState} IN ('not_required', 'reserve_pending', 'reserved', 'finalize_pending', 'committed')`)
+]);
+var attachmentStorageCleanupOutbox = pgTable("attachment_storage_cleanup_outbox", {
+  id: uuid("id").primaryKey().defaultRandom(),
+  sourceKind: text("source_kind").notNull(),
+  sourceId: uuid("source_id").notNull(),
+  storageKey: text("storage_key").notNull(),
+  documentId: uuid("document_id").notNull(),
+  actorUserId: uuid("actor_user_id").notNull(),
+  ownerUserId: uuid("owner_user_id").notNull(),
+  requestedByUserId: uuid("requested_by_user_id").notNull(),
+  workspaceId: text("workspace_id"),
+  size: bigint("size", { mode: "number" }).notNull(),
+  quotaOperationKey: text("quota_operation_key").notNull(),
+  quotaReleaseKind: text("quota_release_kind").default("none").notNull(),
+  quotaReservationId: text("quota_reservation_id"),
+  notBefore: timestamp("not_before").defaultNow().notNull(),
+  retainUntil: timestamp("retain_until"),
+  objectDeletedAt: timestamp("object_deleted_at"),
+  leaseOwner: text("lease_owner"),
+  leaseExpiresAt: timestamp("lease_expires_at"),
+  attemptCount: integer("attempt_count").default(0).notNull(),
+  lastError: text("last_error"),
+  createdAt: timestamp("created_at").defaultNow().notNull()
+}, (table) => [
+  uniqueIndex("attachment_storage_cleanup_outbox_source_unique").on(table.sourceKind, table.sourceId),
+  uniqueIndex("attachment_storage_cleanup_outbox_storage_key_unique").on(table.storageKey),
+  index("attachment_storage_cleanup_outbox_ready_idx").on(table.notBefore, table.leaseExpiresAt, table.createdAt, table.id),
+  index("attachment_storage_cleanup_outbox_actor_idx").on(table.actorUserId, table.id),
+  index("attachment_storage_cleanup_outbox_owner_idx").on(table.ownerUserId, table.id),
+  index("attachment_storage_cleanup_outbox_requester_idx").on(table.requestedByUserId, table.id),
+  check("attachment_storage_cleanup_outbox_source_kind_check", sql`${table.sourceKind} IN ('attachment', 'pending_upload', 'uncommitted_upload')`),
+  check("attachment_storage_cleanup_outbox_quota_kind_check", sql`${table.quotaReleaseKind} IN ('none', 'reserve_pending', 'reservation', 'finalize_pending', 'committed')`),
+  check("attachment_storage_cleanup_outbox_size_check", sql`${table.size} >= 0`),
+  check("attachment_storage_cleanup_outbox_reservation_check", sql`${table.quotaReleaseKind} NOT IN ('reservation', 'finalize_pending') OR ${table.quotaReservationId} IS NOT NULL`)
+]);
+var pendingAttachmentCleanupAuthorizations = pgTable("pending_attachment_cleanup_authorizations", {
+  backendPid: integer("backend_pid").notNull(),
+  transactionId: bigint("transaction_id", { mode: "bigint" }).notNull(),
+  admissionId: uuid("admission_id").notNull(),
+  documentId: uuid("document_id").notNull(),
+  actorUserId: uuid("actor_user_id").notNull(),
+  ownerUserId: uuid("owner_user_id").notNull(),
+  workspaceId: text("workspace_id"),
+  storageKey: text("storage_key").notNull(),
+  tokenHash: text("token_hash").notNull()
+}, (table) => [
+  primaryKey({
+    columns: [table.backendPid, table.transactionId, table.admissionId]
+  })
+]);
 var attachmentRelations = relations(attachments, ({ one }) => ({
   document: one(documents, {
     fields: [attachments.documentId],
@@ -2719,6 +2821,14 @@ function createAccountRuntimeCleanupWithDependencies(dependencies) {
               `${REEMBED_DEDUP_PREFIX}${document.workspaceId}:${document.documentId}`
             ] : []
           ], signal);
+          for (const dedupScope of [
+            `${REEMBED_DEDUP_PREFIX}${escapedDocumentId}`,
+            ...document.workspaceId ? [
+              `${REEMBED_DEDUP_PREFIX}${escapeRedisGlob(encodeURIComponent(document.workspaceId))}:${escapedDocumentId}`
+            ] : []
+          ]) {
+            deleted += await deleteNamespacePattern(dependencies.redis, `${dedupScope}:*`, signal);
+          }
           deleted += await deleteNamespacePattern(dependencies.redis, `${EXTRACT_DONE_PREFIX}${escapedDocumentId}:*`, signal);
           throwIfAborted(signal);
         }

package/dist/backend-api-key-facade.js

@@ -17,49 +17,53 @@ var __export = (target, all) => {
 // ../db/src/schema.ts
 var exports_schema = {};
 __export(exports_schema, {
-  versions: () => versions,
-  versionRelations: () => versionRelations,
-  verifications: () => verifications,
-  users: () => users,
-  tags: () => tags,
-  tagRelations: () => tagRelations,
-  shareRoleEnum: () => shareRoleEnum,
-  shareLinks: () => shareLinks,
-  shareLinkRelations: () => shareLinkRelations,
-  shareGrantStatusEnum: () => shareGrantStatusEnum,
-  shareAccessModeEnum: () => shareAccessModeEnum,
-  sessions: () => sessions,
-  pipelineStatusEnum: () => pipelineStatusEnum,
-  pipelineStageEnum: () => pipelineStageEnum,
-  lifecycleOperations: () => lifecycleOperations,
-  lifecycleOperationStatusEnum: () => lifecycleOperationStatusEnum,
-  lifecycleOperationKindEnum: () => lifecycleOperationKindEnum,
-  guestAccessRelations: () => guestAccessRelations,
-  guestAccess: () => guestAccess,
-  folders: () => folders,
-  folderRelations: () => folderRelations,
-  embeddingStatusEnum: () => embeddingStatusEnum,
-  documents: () => documents,
-  documentVisibilityEnum: () => documentVisibilityEnum,
-  documentTags: () => documentTags,
-  documentTagRelations: () => documentTagRelations,
-  documentRelations: () => documentRelations,
-  documentPipelineRuns: () => documentPipelineRuns,
-  documentPipelineBatches: () => documentPipelineBatches,
-  documentKnowledgeSummaries: () => documentKnowledgeSummaries,
-  documentEmbeddings: () => documentEmbeddings,
-  documentEmbeddingRelations: () => documentEmbeddingRelations,
-  documentCreateOperations: () => documentCreateOperations,
-  categoryRelations: () => categoryRelations,
-  categories: () => categories,
-  auditLog: () => auditLog,
-  attachments: () => attachments,
-  attachmentRelations: () => attachmentRelations,
-  apiKeys: () => apiKeys,
+  accounts: () => accounts,
   apiKeyRelations: () => apiKeyRelations,
-  accounts: () => accounts
+  apiKeys: () => apiKeys,
+  attachmentRelations: () => attachmentRelations,
+  attachmentStorageCleanupOutbox: () => attachmentStorageCleanupOutbox,
+  attachments: () => attachments,
+  auditLog: () => auditLog,
+  categories: () => categories,
+  categoryRelations: () => categoryRelations,
+  documentCreateOperations: () => documentCreateOperations,
+  documentEmbeddingRelations: () => documentEmbeddingRelations,
+  documentEmbeddings: () => documentEmbeddings,
+  documentKnowledgeSummaries: () => documentKnowledgeSummaries,
+  documentPipelineBatches: () => documentPipelineBatches,
+  documentPipelineRuns: () => documentPipelineRuns,
+  documentRelations: () => documentRelations,
+  documentTagRelations: () => documentTagRelations,
+  documentTags: () => documentTags,
+  documentVisibilityEnum: () => documentVisibilityEnum,
+  documents: () => documents,
+  embeddingStatusEnum: () => embeddingStatusEnum,
+  folderRelations: () => folderRelations,
+  folders: () => folders,
+  guestAccess: () => guestAccess,
+  guestAccessRelations: () => guestAccessRelations,
+  lifecycleOperationKindEnum: () => lifecycleOperationKindEnum,
+  lifecycleOperationStatusEnum: () => lifecycleOperationStatusEnum,
+  lifecycleOperations: () => lifecycleOperations,
+  metadataReembedOutbox: () => metadataReembedOutbox,
+  pendingAttachmentCleanupAuthorizations: () => pendingAttachmentCleanupAuthorizations,
+  pendingAttachmentUploads: () => pendingAttachmentUploads,
+  pipelineStageEnum: () => pipelineStageEnum,
+  pipelineStatusEnum: () => pipelineStatusEnum,
+  sessions: () => sessions,
+  shareAccessModeEnum: () => shareAccessModeEnum,
+  shareGrantStatusEnum: () => shareGrantStatusEnum,
+  shareLinkRelations: () => shareLinkRelations,
+  shareLinks: () => shareLinks,
+  shareRoleEnum: () => shareRoleEnum,
+  tagRelations: () => tagRelations,
+  tags: () => tags,
+  users: () => users,
+  verifications: () => verifications,
+  versionRelations: () => versionRelations,
+  versions: () => versions
 });
-import { pgTable, uuid, text, timestamp, bigint, jsonb, index, uniqueIndex, customType, boolean, check, integer, pgEnum } from "drizzle-orm/pg-core";
+import { pgTable, uuid, text, timestamp, bigint, jsonb, index, uniqueIndex, customType, boolean, check, integer, pgEnum, primaryKey } from "drizzle-orm/pg-core";
 import { relations, sql } from "drizzle-orm";
 var vector = customType({
   dataType(config) {
@@ -227,6 +231,7 @@ var documents = pgTable("documents", {
   activeEmbeddingGeneration: uuid("active_embedding_generation"),
   pendingEmbeddingGeneration: uuid("pending_embedding_generation"),
   embeddingProfile: text("embedding_profile"),
+  embeddingContextHash: text("embedding_context_hash"),
   embeddingErrorCode: text("embedding_error_code"),
   embeddingUpdatedAt: timestamp("embedding_updated_at"),
   deletedAt: timestamp("deleted_at"),
@@ -265,6 +270,8 @@ var documentPipelineRuns = pgTable("document_pipeline_runs", {
   generationId: uuid("generation_id").notNull(),
   revision: text("revision").notNull(),
   source: text("source").notNull(),
+  embeddingContextHash: text("embedding_context_hash"),
+  refreshMode: text("refresh_mode").notNull().default("full"),
   status: pipelineStatusEnum("status").notNull().default("pending"),
   prepareStatus: pipelineStatusEnum("prepare_status").notNull().default("pending"),
   embedStatus: pipelineStatusEnum("embed_status").notNull().default("pending"),
@@ -285,7 +292,8 @@ var documentPipelineRuns = pgTable("document_pipeline_runs", {
   updatedAt: timestamp("updated_at").defaultNow().notNull()
 }, (table) => [
   uniqueIndex("document_pipeline_runs_document_generation_idx").on(table.documentId, table.generationId),
-  index("document_pipeline_runs_owner_status_updated_idx").on(table.ownerId, table.status, table.updatedAt)
+  index("document_pipeline_runs_owner_status_updated_idx").on(table.ownerId, table.status, table.updatedAt),
+  check("document_pipeline_runs_refresh_mode_check", sql`${table.refreshMode} in ('incremental', 'full')`)
 ]);
 var documentPipelineBatches = pgTable("document_pipeline_batches", {
   id: uuid("id").primaryKey().defaultRandom(),
@@ -311,6 +319,19 @@ var documentPipelineBatches = pgTable("document_pipeline_batches", {
   index("document_pipeline_batches_stage_status_available_idx").on(table.stage, table.status, table.availableAt),
   index("document_pipeline_batches_document_id_idx").on(table.documentId)
 ]);
+var metadataReembedOutbox = pgTable("metadata_reembed_outbox", {
+  id: uuid("id").primaryKey(),
+  operationId: uuid("operation_id").notNull(),
+  documentId: uuid("document_id").notNull().references(() => documents.id, { onDelete: "cascade" }),
+  ownerId: uuid("owner_id").notNull().references(() => users.id, { onDelete: "cascade" }),
+  workspaceId: text("workspace_id"),
+  revision: text("revision").notNull(),
+  createdAt: timestamp("created_at").defaultNow().notNull()
+}, (table) => [
+  uniqueIndex("metadata_reembed_outbox_operation_document_idx").on(table.operationId, table.documentId),
+  index("metadata_reembed_outbox_operation_id_idx").on(table.operationId, table.id),
+  index("metadata_reembed_outbox_created_id_idx").on(table.createdAt, table.id)
+]);
 var documentKnowledgeSummaries = pgTable("document_knowledge_summaries", {
   id: uuid().primaryKey().defaultRandom(),
   document_id: uuid().notNull().references(() => documents.id, { onDelete: "cascade" }),
@@ -447,6 +468,7 @@ var attachments = pgTable("attachments", {
   id: uuid("id").primaryKey().defaultRandom(),
   documentId: uuid("document_id").notNull().references(() => documents.id, { onDelete: "cascade" }),
   workspaceId: text("workspace_id"),
+  uploadedBy: uuid("uploaded_by").notNull().references(() => users.id, { onDelete: "restrict" }),
   filename: text("filename").notNull(),
   mimeType: text("mime_type").notNull(),
   size: bigint("size", { mode: "number" }).notNull(),
@@ -454,8 +476,88 @@ var attachments = pgTable("attachments", {
   createdAt: timestamp("created_at").defaultNow().notNull()
 }, (table) => [
   index("attachments_document_id_idx").on(table.documentId),
+  index("attachments_uploaded_by_idx").on(table.uploadedBy),
   uniqueIndex("attachments_storage_key_unique").on(table.storageKey)
 ]);
+var pendingAttachmentUploads = pgTable("pending_attachment_uploads", {
+  id: uuid("id").primaryKey().defaultRandom(),
+  documentId: uuid("document_id").notNull().references(() => documents.id, { onDelete: "restrict" }),
+  actorUserId: uuid("actor_user_id").notNull().references(() => users.id, { onDelete: "restrict" }),
+  workspaceId: text("workspace_id"),
+  storageKey: text("storage_key").notNull(),
+  tokenHash: text("token_hash").notNull(),
+  filename: text("filename").notNull(),
+  mimeType: text("mime_type").notNull(),
+  declaredSize: bigint("declared_size", { mode: "number" }).notNull(),
+  quotaReservationId: text("quota_reservation_id"),
+  quotaOperationKey: text("quota_operation_key").notNull(),
+  quotaState: text("quota_state").notNull(),
+  actualSize: bigint("actual_size", { mode: "number" }),
+  urlIssuedAt: timestamp("url_issued_at"),
+  confirmingAt: timestamp("confirming_at"),
+  leaseOwner: text("lease_owner"),
+  leaseExpiresAt: timestamp("lease_expires_at"),
+  attemptCount: integer("attempt_count").default(0).notNull(),
+  lastError: text("last_error"),
+  expiresAt: timestamp("expires_at").notNull(),
+  createdAt: timestamp("created_at").defaultNow().notNull()
+}, (table) => [
+  uniqueIndex("pending_attachment_uploads_storage_key_unique").on(table.storageKey),
+  uniqueIndex("pending_attachment_uploads_token_hash_unique").on(table.tokenHash),
+  index("pending_attachment_uploads_actor_expiry_idx").on(table.actorUserId, table.expiresAt),
+  index("pending_attachment_uploads_document_idx").on(table.documentId),
+  index("pending_attachment_uploads_cleanup_lease_idx").on(table.expiresAt, table.leaseExpiresAt, table.id),
+  check("pending_attachment_uploads_quota_state_check", sql`${table.quotaState} IN ('not_required', 'reserve_pending', 'reserved', 'finalize_pending', 'committed')`)
+]);
+var attachmentStorageCleanupOutbox = pgTable("attachment_storage_cleanup_outbox", {
+  id: uuid("id").primaryKey().defaultRandom(),
+  sourceKind: text("source_kind").notNull(),
+  sourceId: uuid("source_id").notNull(),
+  storageKey: text("storage_key").notNull(),
+  documentId: uuid("document_id").notNull(),
+  actorUserId: uuid("actor_user_id").notNull(),
+  ownerUserId: uuid("owner_user_id").notNull(),
+  requestedByUserId: uuid("requested_by_user_id").notNull(),
+  workspaceId: text("workspace_id"),
+  size: bigint("size", { mode: "number" }).notNull(),
+  quotaOperationKey: text("quota_operation_key").notNull(),
+  quotaReleaseKind: text("quota_release_kind").default("none").notNull(),
+  quotaReservationId: text("quota_reservation_id"),
+  notBefore: timestamp("not_before").defaultNow().notNull(),
+  retainUntil: timestamp("retain_until"),
+  objectDeletedAt: timestamp("object_deleted_at"),
+  leaseOwner: text("lease_owner"),
+  leaseExpiresAt: timestamp("lease_expires_at"),
+  attemptCount: integer("attempt_count").default(0).notNull(),
+  lastError: text("last_error"),
+  createdAt: timestamp("created_at").defaultNow().notNull()
+}, (table) => [
+  uniqueIndex("attachment_storage_cleanup_outbox_source_unique").on(table.sourceKind, table.sourceId),
+  uniqueIndex("attachment_storage_cleanup_outbox_storage_key_unique").on(table.storageKey),
+  index("attachment_storage_cleanup_outbox_ready_idx").on(table.notBefore, table.leaseExpiresAt, table.createdAt, table.id),
+  index("attachment_storage_cleanup_outbox_actor_idx").on(table.actorUserId, table.id),
+  index("attachment_storage_cleanup_outbox_owner_idx").on(table.ownerUserId, table.id),
+  index("attachment_storage_cleanup_outbox_requester_idx").on(table.requestedByUserId, table.id),
+  check("attachment_storage_cleanup_outbox_source_kind_check", sql`${table.sourceKind} IN ('attachment', 'pending_upload', 'uncommitted_upload')`),
+  check("attachment_storage_cleanup_outbox_quota_kind_check", sql`${table.quotaReleaseKind} IN ('none', 'reserve_pending', 'reservation', 'finalize_pending', 'committed')`),
+  check("attachment_storage_cleanup_outbox_size_check", sql`${table.size} >= 0`),
+  check("attachment_storage_cleanup_outbox_reservation_check", sql`${table.quotaReleaseKind} NOT IN ('reservation', 'finalize_pending') OR ${table.quotaReservationId} IS NOT NULL`)
+]);
+var pendingAttachmentCleanupAuthorizations = pgTable("pending_attachment_cleanup_authorizations", {
+  backendPid: integer("backend_pid").notNull(),
+  transactionId: bigint("transaction_id", { mode: "bigint" }).notNull(),
+  admissionId: uuid("admission_id").notNull(),
+  documentId: uuid("document_id").notNull(),
+  actorUserId: uuid("actor_user_id").notNull(),
+  ownerUserId: uuid("owner_user_id").notNull(),
+  workspaceId: text("workspace_id"),
+  storageKey: text("storage_key").notNull(),
+  tokenHash: text("token_hash").notNull()
+}, (table) => [
+  primaryKey({
+    columns: [table.backendPid, table.transactionId, table.admissionId]
+  })
+]);
 var attachmentRelations = relations(attachments, ({ one }) => ({
   document: one(documents, {
     fields: [attachments.documentId],
@@ -596,13 +698,33 @@ import { sql as sql2 } from "drizzle-orm";
 // ../db/src/client.ts
 import { drizzle } from "drizzle-orm/postgres-js";
 import postgres from "postgres";
+function observeDatabaseQuery(observer, query) {
+  if (!observer)
+    return;
+  try {
+    observer(Object.freeze({ query }));
+  } catch {}
+}
+function createDatabaseClient(databaseUrl, options = {}) {
+  const sqlClient = postgres(databaseUrl, {
+    max: options.max ?? 20,
+    idle_timeout: options.idleTimeout ?? 30,
+    connect_timeout: options.connectTimeout ?? 10,
+    ...options.queryObserver ? {
+      debug: (_connection, query) => {
+        observeDatabaseQuery(options.queryObserver, query);
+      }
+    } : {}
+  });
+  return {
+    client: sqlClient,
+    db: drizzle(sqlClient, { schema: exports_schema })
+  };
+}
 var databaseUrl = process.env.DATABASE_URL || "postgresql://hiai_app:changeme@localhost:5437/hiai_docs";
-var client = postgres(databaseUrl, {
-  max: 20,
-  idle_timeout: 30,
-  connect_timeout: 10
-});
-var db = drizzle(client, { schema: exports_schema });
+var database = createDatabaseClient(databaseUrl, {});
+var client = database.client;
+var db = database.db;
 
 // ../db/src/with-tenant.ts
 var ZERO_UUID = "00000000-0000-0000-0000-000000000000";
@@ -617,7 +739,10 @@ function adminTenantContext(ownerId) {
   };
 }
 async function withTenant(ctx, fn) {
-  return db.transaction(async (tx) => {
+  return withTenantDatabase(db, ctx, fn);
+}
+async function withTenantDatabase(database2, ctx, fn) {
+  return database2.transaction(async (tx) => {
     await tx.execute(sql2`SELECT set_config('app.current_user_id', ${ctx.userId}, true)`);
     await tx.execute(sql2`SELECT set_config('app.current_user_role', ${ctx.role}, true)`);
     await tx.execute(sql2`SELECT set_config('app.current_workspace_id', ${ctx.workspaceId ?? ""}, true)`);
@@ -626,7 +751,23 @@ async function withTenant(ctx, fn) {
 }
 
 // ../../backend/src/lib/api-keys.ts
-import { and, desc, eq } from "drizzle-orm";
+import { and as and2, desc, eq as eq2 } from "drizzle-orm";
+
+// ../../backend/src/lib/account-purge-fence.ts
+import { and, eq, isNotNull, ne, sql as sql3 } from "drizzle-orm";
+function isAccountPurgeFencedError(error) {
+  let current = error;
+  for (let depth = 0;depth < 4; depth += 1) {
+    if (typeof current !== "object" || current === null)
+      return false;
+    const candidate = current;
+    if (candidate.code === "55000" && (candidate.constraint_name === "account_purge_fenced" || candidate.constraint === "account_purge_fenced" || candidate.message === "account_purge_fenced")) {
+      return true;
+    }
+    current = candidate.cause;
+  }
+  return false;
+}
 
 // ../../backend/src/lib/api-key-encryption.ts
 var VERSION = "v1";
@@ -737,7 +878,7 @@ async function revealCategoryApiKey(id, ownerId, encryptionSecret) {
   const [row] = await withTenant({ userId: ownerId, role: "user" }, (tx) => tx.select({
     encryptedKey: apiKeys.encryptedKey,
     scopes: apiKeys.scopes
-  }).from(apiKeys).where(and(eq(apiKeys.id, id), eq(apiKeys.ownerId, ownerId))).limit(1));
+  }).from(apiKeys).where(and2(eq2(apiKeys.id, id), eq2(apiKeys.ownerId, ownerId))).limit(1));
   if (!row?.encryptedKey)
     return null;
   const scopes = row.scopes ?? [];
@@ -755,7 +896,7 @@ async function listApiKeys(ownerId) {
     expiresAt: apiKeys.expiresAt,
     createdAt: apiKeys.createdAt,
     encryptedKey: apiKeys.encryptedKey
-  }).from(apiKeys).where(eq(apiKeys.ownerId, ownerId)).orderBy(desc(apiKeys.createdAt)));
+  }).from(apiKeys).where(eq2(apiKeys.ownerId, ownerId)).orderBy(desc(apiKeys.createdAt)));
   return rows.map((r) => ({
     id: r.id,
     name: r.name,
@@ -768,7 +909,7 @@ async function listApiKeys(ownerId) {
   }));
 }
 async function revokeApiKey(id, ownerId) {
-  const deleted = await withTenant({ userId: ownerId, role: "user" }, (tx) => tx.delete(apiKeys).where(and(eq(apiKeys.id, id), eq(apiKeys.ownerId, ownerId))).returning({ id: apiKeys.id }));
+  const deleted = await withTenant({ userId: ownerId, role: "user" }, (tx) => tx.delete(apiKeys).where(and2(eq2(apiKeys.id, id), eq2(apiKeys.ownerId, ownerId))).returning({ id: apiKeys.id }));
   return deleted.length > 0;
 }
 async function validateApiKey(key) {
@@ -778,7 +919,7 @@ async function validateApiKey(key) {
     ownerId: apiKeys.ownerId,
     scopes: apiKeys.scopes,
     expiresAt: apiKeys.expiresAt
-  }).from(apiKeys).where(eq(apiKeys.keyHash, keyHash)).limit(1));
+  }).from(apiKeys).where(eq2(apiKeys.keyHash, keyHash)).limit(1));
   if (!row) {
     return null;
   }
@@ -788,7 +929,12 @@ async function validateApiKey(key) {
   const scopes = parseApiKeyScopes(row.scopes ?? []);
   if (!scopes)
     return null;
-  await withTenant(API_KEY_ADMIN_TENANT, (tx) => tx.update(apiKeys).set({ lastUsedAt: new Date }).where(eq(apiKeys.id, row.id)));
+  try {
+    await withTenant(API_KEY_ADMIN_TENANT, (tx) => tx.update(apiKeys).set({ lastUsedAt: new Date }).where(eq2(apiKeys.id, row.id)));
+  } catch (error) {
+    if (!isAccountPurgeFencedError(error))
+      throw error;
+  }
   return {
     id: row.id,
     ownerId: row.ownerId,
@@ -796,11 +942,11 @@ async function validateApiKey(key) {
   };
 }
 export {
-  validateApiKey as verifyApiKey,
-  revokeApiKey,
-  revealCategoryApiKey,
-  listApiKeys,
-  createApiKey as issueApiKey,
+  GLOBAL_API_SCOPE,
   buildCategoryApiKeyScopes,
-  GLOBAL_API_SCOPE
+  createApiKey as issueApiKey,
+  listApiKeys,
+  revealCategoryApiKey,
+  revokeApiKey,
+  validateApiKey as verifyApiKey
 };